Florist Hackney Wick Privacy Policy

Introduction

This Privacy Policy details how Florist Hackney Wick collects, uses, stores, and safeguards the personal information of all customers placing orders from Hackney Wick and the surrounding districts. We are committed to ensuring that your privacy is protected in full compliance with the UK General Data Protection Regulation (GDPR). This policy outlines the types of personal data we gather, the lawful basis for processing, how long we retain data, details of third-party data processors we use, and the rights you have regarding your information.

Scope of This Policy

This policy applies to all customers making purchases or otherwise engaging with Florist Hackney Wick in Hackney Wick and neighbouring areas. It addresses all data collected through our website, phone orders, in-person purchases, and any other communication or transaction channels.

Information We Collect

For the purpose of processing your orders and managing our customer relationships, we may collect and process the following categories of personal data:

• Identity Data: Full name, title, and, if applicable, company details.
• Contact Data: Delivery address, billing address, postcode, phone numbers, and other contact details provided by you.
• Order Data: Information related to the products you purchase, delivery instructions, gift messages, and relevant preferences.
• Payment Information: Transaction data including card or bank details (processed securely by trusted third-party payment processors and not stored directly by us).
• Correspondence: Any information shared when you contact our customer service, either via the website, phone, or in person.
• Technical Data: IP address, browser information, and usage data collected through cookies for website functionality, security, and performance analysis (always in accordance with our cookie policy).

Lawful Basis for Processing

We process your personal information according to the lawful bases defined in GDPR, including:

• Performance of a Contract: Most data collected is essential for fulfilling your order, delivering goods, collecting payments, and optimizing customer service as part of our contractual relationship with you.
• Legal Obligation: We may need to process certain data to comply with legal requirements, such as tax and accounting obligations.
• Legitimate Interests: In some cases, we rely on our legitimate business interests for marketing communications, security, and improving our services, provided these interests are not overridden by your privacy rights.
• Consent: For certain activities, such as sending marketing communications by email or SMS, we seek your explicit consent beforehand. You can withdraw consent at any time.

How We Use Your Data

We use your personal information to:

• Process your purchases and deliver goods to your chosen address.
• Communicate updates regarding your order, delivery status, or issues requiring your attention.
• Respond to queries, feedback, or complaints to enhance our customer service.
• Detect and prevent fraud or misuse of our services.
• Maintain financial and business records in line with legal requirements.
• Subject to your preferences, send information regarding new products, offers, or events. You can opt out of such communications at any time.

Data Sharing and Processors

Your personal data may be shared with trusted third-party service providers (data processors) strictly for operational, legal, and business purposes. These may include:

• Payment Processors: Third parties assisting with secure payment collection.
• IT Service Providers: Companies hosting our website, cloud storage, and communication tools.
• Delivery Partners: Couriers and postal services ensuring your orders reach you promptly.
• Professional Advisors: Accountants, legal advisors, and consultants involved in necessary legal or regulatory processes.

In each case, we ensure our partners are GDPR-compliant, provide appropriate safeguards, and only process data on our documented instructions.

International Data Transfers

We primarily store and process data within the UK and the European Economic Area (EEA). If, for operational reasons, your data is transferred outside the UK or EEA, we ensure it is protected by appropriate legal safeguards such as data processing agreements or standard contractual clauses as required by data protection laws.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including for the duration of our ongoing relationship and to comply with legal, tax, or accounting obligations. Typically, customer and transaction data are kept for up to seven years to meet regulatory requirements. Marketing preferences will be reviewed periodically, and any data no longer required will be securely deleted or anonymised.

Your Data Protection Rights

Under the GDPR, you have important rights regarding your personal data. These include:

• Right of Access: You may request details of the personal information we hold about you.
• Right to Rectification: If you believe that data we hold is inaccurate or incomplete, please contact us to have it corrected.
• Right to Erasure: You can ask us to delete your data under certain circumstances, such as when it is no longer necessary for the purpose collected.
• Right to Restrict Processing: You may request that we restrict how we process your data in certain situations.
• Right to Data Portability: Where applicable, you can ask us to provide your data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, direct marketing, or automated decision making.
• Right to Withdraw Consent: Where we rely on consent to process your data, you may withdraw that consent at any time.

To exercise any of the above rights, please contact us via the communication channels as specified on our website or at our physical premises in Hackney Wick. If you believe your data has been handled incorrectly, you also have the right to lodge a complaint with the UK Information Commissioner's Office.

Data Security

Protecting your data is our priority. We implement a combination of physical, technical, and organisational measures to keep your personal information secure, including data encryption, access controls, staff training, and regular review of data handling practices. Our security procedures are designed to keep risk to a minimum throughout the data lifecycle.

Changes to This Policy

We may update this Privacy Policy to reflect changes in law, technology, or our business practices. We advise you to review this policy regularly. Any significant changes will be brought to your attention through our website or other direct communications.

Contact and Further Information

If you have any questions or concerns about how Florist Hackney Wick handles your personal information or regarding any aspect of this privacy policy, please visit us at our store or use the official contact form provided on our website. We are committed to addressing your queries transparently and promptly.